Merge remote-tracking branch 'origin/feat/workspace-principal' into feat/credential-group-resource-policies

# Conflicts:
#	design/credential-group-authorization.md
#	design/principal-passing.md
#	design/resource-policies.md

Author: TheodoreSpeaks